This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          7MgumiHgPa/KxbMhw5OLmPzG5ejmwO7XnKXh4ugBqtU=
Subject key identifier:   46:A8:FF:C1:47:3C:59:BC:FF:34:11:18:C1:E1:F0:EE:C7:9B:C8:E7
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019ABE1ADEAE6A5DAB93989E8D6C4F59AC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1774
Signing time:             Wed 26 Nov 2025 03:00:23 +0000
Manifest this update:     Wed 26 Nov 2025 03:00:23 +0000
Manifest next update:     Thu 27 Nov 2025 03:00:23 +0000
Files and hashes:         1: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: kujSKSuIh85dvQm5YNnCDIIECkninrEtYyiTzB0ikdo=)
                          2: K3O0AE3ipMAixLfcc54vqisf9Lk.roa (hash: 39lhfBxsDOQl4+NOlD/26yVUVPea0hcXtUuz/K2/lnU=)
                          3: Ny5zIYdEORHoaktmzqBhJlg15eU.roa (hash: 8s/IpUQd16S/jbNe07o2oL6oFrvSy6sNUQREu4sn1Ns=)
                          4: bbcQM14_wibjboqxlb73XNgGNuk.roa (hash: S8JvppRiDYyzxf9tLizafl4kxpltI7FSoBpu/hZzQ/0=)
                          5: cPPLeXEbjsoxnKdXfZtJnpoWC_8.roa (hash: fdKoZcDtP/rbGjX0LgJqmztKrOhHeRDQpt/Dg+/iXx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Nov 2025 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:be:1a:de:ae:6a:5d:ab:93:98:9e:8d:6c:4f:59:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Nov 26 03:00:23 2025 GMT
            Not After : Nov 27 03:00:23 2025 GMT
        Subject: CN=46a8ffc1473c59bcff341118c1e1f0eec79bc8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:cc:a9:57:e8:39:63:2c:2e:a9:a2:da:7f:
                    f3:30:13:0f:c9:72:4e:f0:5a:b4:a9:d7:17:c9:0f:
                    a7:30:dc:9f:8b:d9:7a:52:82:26:c4:d4:fc:b8:46:
                    53:45:9a:9d:8a:68:03:17:bd:f5:16:91:56:45:4f:
                    cc:e6:05:33:b8:15:87:35:4e:a1:eb:d1:0f:7e:fb:
                    75:da:c5:86:47:1a:a3:d0:f0:f6:ef:05:3b:e0:17:
                    64:00:82:95:f6:8d:1e:1b:26:10:a0:80:58:66:74:
                    c2:0e:f7:bc:3a:03:5b:fd:f5:31:9b:e9:c2:e9:40:
                    d4:5b:c6:ad:3b:22:21:06:95:0e:b6:70:c6:cb:9d:
                    41:b0:56:d7:08:10:ea:1e:3b:12:7d:9c:cf:36:69:
                    5c:59:78:cc:82:fd:c8:ff:c2:a9:8d:10:d9:36:f2:
                    f1:c4:dd:6f:ad:e3:21:da:9b:09:67:ba:ed:c3:38:
                    3e:57:4f:dd:7b:09:70:cd:fe:f8:14:c1:01:2e:62:
                    42:7c:ac:a8:7b:6e:f2:e9:67:a4:f1:7e:13:b4:d7:
                    4b:fe:be:5c:5f:70:e5:4d:70:c3:bd:d2:bd:2c:87:
                    b2:bb:d4:ed:7c:01:5f:2a:26:87:df:2d:93:0e:9e:
                    af:9a:ff:d7:c7:25:fe:33:bf:84:be:6c:9d:dc:05:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:FF:C1:47:3C:59:BC:FF:34:11:18:C1:E1:F0:EE:C7:9B:C8:E7
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:94:94:f3:28:7b:48:1b:63:03:8d:11:52:24:3c:df:98:
         b8:c7:aa:68:d6:86:d2:3d:5e:b3:b1:62:df:02:5e:7e:2b:c9:
         91:37:41:69:cc:b6:97:93:c4:9c:b5:0c:6b:29:96:ca:fb:48:
         ee:0d:9e:3b:d9:f2:44:20:f6:43:07:03:52:24:0e:1f:a5:f4:
         bf:fd:6c:87:fb:30:ec:9b:f0:69:3b:a4:da:d0:f1:0e:00:bb:
         fd:e7:ba:3d:2b:32:ab:2f:58:e0:ac:c1:2b:60:bd:49:0b:a4:
         c1:e2:65:f3:b3:76:ae:30:63:5f:4e:a2:07:76:3d:31:ef:b8:
         60:8c:b7:da:25:34:c8:8d:a5:b3:ac:3b:d6:6e:90:11:28:b5:
         c9:4e:25:4a:92:f5:0f:7a:14:8a:14:da:de:3e:b0:38:00:1d:
         9b:c8:1d:af:93:9d:8a:6d:f3:ee:fb:ca:39:2f:27:f4:1f:49:
         54:83:ff:04:95:cd:be:a4:44:6c:62:16:bb:9e:fd:0d:47:b2:
         1f:69:35:ec:21:7a:31:3d:c7:5e:8d:58:8f:d9:df:2b:5d:0a:
         e2:0a:10:57:d2:a7:26:fe:b0:33:8d:bb:85:c4:13:ba:ec:6a:
         4e:ab:ee:96:4a:2d:ea:65:7d:2b:79:b7:cd:15:64:eb:02:57:
         43:21:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 12:11:11 2025 by rpki-client